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(57) Abstract: In a subscriber television system with a host terminal, the present invention allows the identification of the individual 
packets from two separate MPEG transport streams that have been multiplexed together for decoding by a single external conditional 
access or poini-of-deployment (POD) module. The decoding of individual packets from two separate MPEG transport streams sup- 
ports the use of mulUple tuner host terminals for such functions as picture-in-picture (PIP) program viewing and the viewing of one 
program while recording a second program. 
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CROSS-REFERENCE TO RELATED APPLICATIONS 
The present application claims priority to U.S. Provisional Patent Application Number 
60/1 70,344, Bacon et al., entitled Method of Supplying Multiple Digital Streams to an External 
10 Conditional Access Module, filed 13 December 1999, which is incorporated herein by reference. 

FIELD OF THE INVENTION 
This invention relates generally to decrypting multiple digital data streams in a subscriber 
television system, and more specifically to supplying multiple digital streams to an external 
15 conditional access or Point-of-Deployment (POD) module for decryption. 

BACKGROUND OF THE INVENTION 

Historically, a subscriber television system operator provides a subscriber with a set-top 
terminal that allows the subscriber to receive and decrypt television programs and services. The 
20 set-top provides access to the subscriber television system, including providing conditional access 
for the specific subscriber television system. The subscriber television system uses conditional 
access to prevent unauthorized users from pirating or accessing the system services. A system 
subscriber ''rented" the set-top from the subscriber television system by paying a monthly fee. 
Subscriber's returned the set-top when they moved or changed service providers. 
25 The Telecommunications Act of 1996, which is being implemented by the Federal 

Communications Commission (FCC), allows subscribers to buy a host terminal, also known as a 
consumer set-top terminal, from a variety of sources for use in any subscriber television system. 
The host terminal may be integrated into a videocassette recorder (VCR), television (TV), 
computer, or other similar device. 
30 The operator of each subscriber television system has the responsibility of providing an 

interface for this subscriber owned equipment that allows it to function with the individual 
subscriber television system. To address the concern of the subscriber television system operators 
about conditional access and piracy, the FCC directed the Society of Cable Television Engineers 
(SCTE) to establish standards for what is referred to as an external conditional access module or a 
35 Point-of-Deployment (POD) module. The POD module provides a removable conditional access 
element for a host terminal. A POD module is provided by the individual subscriber television 

1 
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system and upon insertion into a host terminal, and upon receiving proper authorization, allows 
the decryption of encrypted conditional access services to prevent piracy. A POD module 
conforms generally to the Personal Computer Memory Card International Association (PCMCIA) 
standards. The POD module is typically a little larger than a credit card, is inserted into a slot in a 
5 host terminal, and communicates with the host terminal via a PCMCIA connector. The POD 

module would be removed from the host terminal and returned to the subscriber television system 
when the subscriber moves or changes service providers. The subscriber would get a new POD 
module from the next subscriber television system to which they elect to subscribe for services. 
The subscriber television systems provide a large quantity of programs and services. The 
10 programs and services are typically provided to the subscriber via transport streams within a 

transmission signal. There can be multiple programs or services within a single transport stream 
and multiple transports streams within the transmission signal. A host terminal that wants to 
simultaneously display programming from two separate transport streams would use two tuners, 
one for each transport stream. This creates a problem in that there is the possibility that two 
1 5 transport streams need to be decrypted for conditional access. The SCTE specification limits the 
number of data streams that can be input at one time into a POD module to one. On a host 
terminal with Picture-in-Picture (PIP) functionality that requires two inputs, the host terminal 
would not be able to simultaneously decrypt the two data streams to provide both the main and 
the secondary picture data. A host terminal with multiple data streams, such as those with two or 
20 more tuners, must limit the decryption to one data stream from one tuner. The system subscriber 
that owns a host terminal with multiple tuners will want to use the functionality that is provided 
with those elements, such as PIP or the simultaneous taping and viewing of different programs. 
The operator of a subscriber television system needs to be able to provide a POD module that is 
capable of receiving multiple data streams for decryption to support the multiple tuner 
25 functionality. Thus, what is needed is a method, host terminal, and external conditional access 

module that allows the decryption of multiple data streams to support a muhiple data stream host 
terminal. 



BRIEF DESCRIPTION OF THE DRAWINGS 

30 FIG. 1 is a block diagram of a subscriber television system. 

FIG. 2 is a block diagram of a host terminal. 

FIG. 3 is a block diagram view of the functional components of an external conditional access 
module. 

FIG. 4 is an illustration of a packetized data signal with a start of packet signal and a transport 
35 stream source indicator signal. 
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FIG. 5 is a detailed block diagram view of the functional components of an external 
conditional access module. 



10 



DETAILED DESCRIPTION 

The present invention is directed to a method, host terminal, and external conditional access 
module that enable the decryption of portions of multiple packetized data streams associated with 
a multiple tuner host terminal. 

The available functionality can vary widely between different host terminals, based on several 
factors. The available functionality may vary based on cost and manufacturer of the host terminal 
or based on the support provided by the local subscriber television system. A less expensive host 
terminal would typically have less functionality. The host terminal may include the equipment 
need to perform a function, but if an individual subscriber television system does not allow or 
support a function the subscriber may not be able to access the function. For example, a host 
terminal may have multiple tuners to support picture-in-picture (PIP) video display, but if the 
1 5 subscriber television system does not allow or support PIP, a subscriber may not be able to use the 
functionality available in their host terminal. Conditional access is one method a system operator 
can use to control the functionality available within an individual subscriber television system. 
With conditional access, a subscriber needs authorization to access some or all of the programs or 
services. An external conditional access module or point-of-deployment (POD) module controls 
20 the conditional access of the subscriber to the programming and services of the subscriber 

television system. The system operator provides the external conditional access module that a 
subscriber inserts into their host terminal. The host terminal would normally transmit data packets 
for a subscriber-selected program to the external conditional access module for decryption. The 
host terminal would also typically transmit a data clock or start signal that indicates the start of 
25 each of the data packets. The external conditional access module determines if the subscriber is 
authorized to receive a selected program and, if authorized, decrypts the data packets for that 
program. The decrypted data packets can then be decoded and displayed to the subscriber. 

The advent of picture-in-picture capabilities and the desire to be able to record one program 
while viewing another requires the ability to perform conditional access on packets from multiple 
30 packetized data streams without adding a second external conditional access module. Multiple 
data streams provide data for two or more programs to be displayed simultaneously. The present 
invention allows the identification, by a single POD module, of the individual packets from two 
or more separate MPEG transport streams that have been multiplexed together for decrypting. The 
POD module, knowing the source of the individual packet, can determine if the packet is 
35 authorized to be decrypted for the individual subscriber and the correct decryption parameters to 
apply to decrypt each packet. 
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The present invention will be described more fully hereinafter with reference to the 
accompanying drawings in which like numerals represent like elements throughout the several 
figures and in which exemplary embodiments of the invention are shown. This invention may, 
however, be embodied in many different forms and should not be construed as limited to the 
5 embodiments set forth herein; rather, these embodiments are provided so that this disclosure will 
be thorough and complete, and will fully convey the scope of the invention to those skilled in the 
art. The present invention is best understood within the context of a subscriber television system. 
Referring now to the drawings, a subscriber television system and exemplary embodiments of the 
present invention will be described. 
10 FIG, 1 shows a block diagram view of a subscriber television system 10, including a Host 

Terminal 14. Generally, the subscriber television system 10 is a high quality, reliable and 
integrated network system that features video, audio, voice, and data services to subscribers. 
Although FIG. 1 depicts a high level view of a subscriber television system including a regional 
Hybrid Fiber/Coax (HFC) Access Network 38, as will be described below, it should be 
15 appreciated that a plurality of subscriber television systems can tie together a plurality of regional 
networks into an integrated global network so that subscribers can receive content provided from 
anywhere in the world. The subscriber television system 10 shown in FIG. 1 delivers broadcast 
video signals as digitally formatted signals in addition to delivering traditional broadcast analog 
video signals. Furthermore, the system can support one way broadcast services as well as both 
20 one-way data services and two-way media and data services. The two-way operation of the 

network allows for subscriber interactivity with services, such as Pay-Per-View programming, 
View-on-Demand programs, and interactive applications, such as Email, Internet connections, and 
EPG applications. 

The subscriber television system 10 provides the interfaces, network control, transport 
25 control, session control, and servers to access content and services, and distributes content and 

services to subscribers. As shown in FIG. 1, a typical subscriber television system 10 is composed 
of interfaces to Content Providers 18, Network Operations Centers (NOC) 22, core networks 30 
of headends 26, hubs 34, HFC Access Networks 38, and subscribers' host terminals 14. It should 
be appreciated that although single components (e.g., headend 26, core network 30, HFC Access 
30 network 38, etc.) are illustrated in FIG. 1, a subscriber television system 10 can feature a plurality 
of each of the illustrated components. 

The Content Provider 18 represents one or more providers of content, such as video channels, 
music channels, data channels, video services, audio services, and data services. For example, the 
Content Provider 18 could comprise an Electronic Program Guide (EPG) data provider that acts 
35 as a data service provider. The Content Provider 18 could also represent an Internet Service 

Provider (ISP) providing data to the system to enable subscribers' web access or web-enhanced 
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he«ie„d 26 for fu,*er «n^Usio„ ,o subscribe dow„s«»„ i„ ^ ,„ 
com™„„io«i„n „ift headend 26 is a Nenvork Op.«i„„ Cenur (NOC) 22. which is an 
external n,anagem«„ cemer. imeriac«. »i* ^ subacriber ,.,eviaio„ sy«e™ .«,„,„„„ ^ 

remote operation of the system. 

Con,en, p^vided by rte Con.en, Provider 18 is c.^™ica«d u, ™e orn,„„ h^rdenda 26 

Fr„n„hoaeeadends26.hecon,«„iad»,co™™„„ica,ed,„U.ecor.„envortc30„fh„bs34.„d 

on.oap,ara,,^of>,PCAcceasNe,™H„,„„,,<.„e„PCAcoeaaNe.wo,.3.iai,,na.„.ed,.ne 
HFC Access Ne^voHc 38 .^pica,,, co„,pris.s . p,„„,i,y „f HFC nodes 42. each of which ™ay 
semce a local geog^phical area. T„e co„«„, provided fiw, U,e CoMen, Provider 18 is 
.r.nsn,i„ed Ihrough ,be headend 26. hub 34 and HFC Access Network 38 downstream to on. or 
-ore taps 46 fron, each one of the HFC nodes 42 of the HFC Access Network 38. n,. hub 34 

Ute HFC node 42 connects ,o a subscriber's host tenninal ,4 though coaxial cable i„ a logical 
~gur.non. Which is where .he op„cal-,o-e,ec.rica, and electrical-to-optical conversations 
of the HFC network take place. Fron, the HFC node 42 a coaxial d,«p connects the tap 4. ,„ a 

subscribers' home. , 

FIG. 2 is a block diagram view of a host tenninal ,4. Tlte host terminal 14 receives d« 
■ncom^g radio frequency (RF) signal 21, fron, the subscriber television systen, ,.. The signal is 
avadable to .he „„l,ip,e ...ners 21. and 2,1 and to the ou,-of-band (OOB, receiver 215 J 
2.6. The OOB signaling p^vides an a,.e™tive contntunictions path within dte 
subscriber television systen, ,0. Control, signaling, and retun, conrmunications are typically 
comnrun «ed using .e OOB signaling, host .e™,„al „ includes a centra, processing unit 
(CPU) 23. for con«^ll,ng the host tenninal 14 and the POD interface 225. The host te^rinal ,4 
contains all d,e nomral circuitry requited to function as a set-,op tenninal (STT) or honte 
con.municatio.tern.inal <HCT, including a power supply 270. an LED display 265. an infrared 
(IR) reccver 26.. a keypad 261. an output modulator 250. an MPEG decoder 240. a graphics 
gene^tor 241. a DRAM 24,, a F« 235. and oU.r suppon circuit.^. Tbis bos, ,e J„a'.4 also 
"Eludes two ,nde,«„de„, .une,^ ,„er 2,. and tuner 2,1. and is capable of receiving and tuning 
nvo separate, enctypted packetiz^l data streams. The present invention assigns a unique 
des,g„a.o, or address to each tuner to be used in identifring the sou.,, of packetized data 
Add,,,o„ally. the host .enninal 14 contains the circuitry required to imerface to a POD module 
wh.ch uses the POD interface 225 and a PCMCIA PC Cart connector. TTe typical POD 225 ' 
mterface specification is described in the Society of Cable Telecommunications E„g,„eers Inc 
Eng,„eer,„g Commit«.e. Digital Video Subcommittee Document SCTE DVM95 entitled " 
'Pr^se^HOST-POn ,„.er^ .^.j,e«/„„-. dated January 7. 2000. which is i'nco.pora.ed 
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herein by reference. The POD interface 225 of the present invention includes additional or 
modified elements to support decrypting packetized data from multiple sources. A multiplexer 
226 and a demultiplexer 227 are included. The multiplexer 226 multiplexes together select 
portions of the separate signals it receives from each tuner and generates a unique designator 
5 signal indicating the originating tuner for each portion of the multiplexed signal. The 
demultiplexer 227 takes the returned signal from a POD module and separates it into 
demultiplexed signals associated with each tuner. 

FIG. 3 is a block diagram view of the functional components of an external conditional access 
module 310. The external conditional access module or point-of-deployment (POD) module 310 
10 is inserted into the subscriber's host terminal 14. The specifications of the POD module 310 are 
described in the Society of Cable Telecommunications Engineers, Inc., Engineering Committee, 
Digital Video Subcommittee Document SCTE DVS 131, Rev. 7, entitled ''Draft Point-of 
Deployment (POD) Module Interface ProposaF, dated December 3, 1998, which is incorporated 
herein by reference. The POD module 310 interfaces to the POD interface 225 of FIG. 2, 
' 1 5 including the multiplexer 226 and the demultiplexer 227. 

In an exemplary embodiment the data stream is a Moving Picture Experts Group (MPEG) 
transport stream. The present invention is not so limited and can be used to identify multiplexed 
portions of other types of data streams, including identifying the source of different portions of a 
multiplexed signal associated with two separate data bit streams or with packetized data streams. 
20 The packetized data streams can include formatted data such as Internet Protocol (IP), MPEG-4, 
and asynchronous transfer mode (ATM) formatted data. In this exemplary embodiment, MPEG 
refers to the MPEG- 1 and MPEG-2 standards. The MPEG- 1 standards (ISO/lEC 1 1 1 72) and the 
MPEG-2 standards (ISO/lEC 13818) are described in detail in the International Organization for 
Standardization document ISO/IEC JTC1/SC29/WG1 1 N (June 1996 for MPEG-1 and July 1996 
25 for MPEG-2), which are hereby incorporated by reference. 

The muhiplexer 226, of host terminal 14, takes MPEG Data 1 and MPEG Data 2 from their 
respective sources and multiplexes the two data streams together to create the Multiplexed MPEG 
Data, The multiplexer 226 transmits the multiplex of multiple complete transport streams to the 
POD module 310. The MPEG Data 1 and MPEG Data 2 can be a variety of data and data formats, 
30 including a bit stream, a packetized data stream, IP data, and individual MPEG uansport streams 
with audio, video, and data packets. The multiplexing can be performed based on a variety of data 
unit sizes, including data unit sizes of a bit, a byte, or a packet. 

An MPEG transport stream can contain data packets for multiple programs. In an alternative 
embodiment, the multiplexer 226 determines the packet identification (PID) for the packets 
35 related to a selected program within the transport streams from each source and then multiplexes 
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together the desired program associated packets based on the associated PIDs. In this alterative 
embodiment, only the desired packets are transmitted to the POD module 310. 

Referring to FIG. 4, the Data or Multiplexed MPEG Data stream signal 410 is the multiplex 
of the MPEG Data 1 and MPEG Data 2 data streams. The Start or MPEG Start signal 420 
indicates the start of an MPEG packet with a signal level change 422 and is associated with the 
synchronization (sync) word 412 in the header of an MPEG packet. In an alternative embodiment 
the Start signal 420 indicates a bit or byte of data. The Stream Select or transport stream source 
indicator signal 430 indicates the source of the associated portion of the signal, portions including 
bus, bytes, or packets. For example, the packets starting with the packet containing sync word 412 
are associated with the MPEG Data 1 source assigned the unique designator "11" 432 and the 
prior packet 411 would be associated with the MPEG Data 2 souree assigned the unique 
designator "GO" 431. In addition to the Multiplexed MPEG Data stream signal 410, the 
multiplexer 226 transmits the MPEG Start signal 420 and the Stream Select signal 430 signal to 
the POD module 310. The MPEG Start signal 420 is associated with the MPEG clocks signals of 
the MPEG Data 1 and MPEG Data 2 data streams. 

Referring again to FIG. 3, the POD module 310 receives the Data stream signal 410, the 
MPEG Clock signal 420, and a Stream Select signal 430 in the POD Demultiplexer 330. The 
demultiplexer 330 identifies the portions of the Data stream signal 410 as packets from each 
unique source (MPEG Data I or MPEG Data 2) based on the Stream Select signal 430 The 
source-associated packets of the Data stream signal 410 are transmitted to a source-associated 
decryptor, either decryptor 340 or decryptor 345, for decryption. The Conditional Access Control 
360 determines if the subscriber is authorized to have the source-associated data decrypted. If the 
subscriber is authorized to receive the selected program or service, the Conditional Access 
Control 360 instructs decryptor 340 or decryptor 345 as to the proper deco'ption to use for 
decrypting the selected program associated data. This means that data associated with both either 
or neither sour.:e may be decrypted. If the decision is made to authorize decryption, the authorized 
source associated data will pass through a decryptor, otherwise the decryptor is bypassed. The 
selected program packets from decryptor 340 and decryptor 345 are transmitted to POD 
Multiplexer 350 to be recombined into a Multiplexed MPEG Data' signal. The packets may be 
decrypted if the subscriber was authorized to receive the packet associated program or service 
The data can still be encrypted if the subscriber was not authorized to receive the associated 
programming or service. The Multiplexed MPEG Data' signal, with the recombined data of the 
source associated packets, is transmitted back to the demultiplexer 227 of the host terminal 14 
The demultiplexer 227 uses the Stream Select signal 430 to sepame the Multiplexed MPEG Data- 
signal back into post-decryption tuner associated signals MPEG Data 1 ' and MPEG Data T with 
associated MPEG Start signals. The MPEG Data 1 ' and MPEG Dau 2' signals are related to the 
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initial MPEG Data 1 and MPEG Data 2 signals. The host terminal 14 uses the decrypted signals to 
cause the display of programming associated with a first tuner, the MPEG Data 1 ' signal, as a 
primary picture and the programming associated with a second tuner, the MPEG Data 2' signal, 
as a secondary picture for a PIP function. Those skilled in the art will appreciate that the order of 
5 the PIP pictures can be reversed and that the separately identified signaling can be used for other 
purposes such as recording one program while continuing to view another program. 

FIG. 5 is a detailed functional block diagram of the POD module 310 of the present invention. 
In another exemplary embodiment, the POD module 310 contains a PCMCIA connection 505 
through which MPEG transport streams are received by PCMCIA/POD interface 510, 
10 demultiplexed by MPEG Transport Demultiplexor 512, decrypted if the conditional access control 
allows by Core Decryptor 514, re-encrypted for copy protection by Encryptor 516, multiplexed 
back together by MPEG Transport Multiplexor 518, and transmitted to the host terminal 14 by 
PCMCIA/POD interface 510. Additionally, the POD module 310 contains circuitry, OOB 
Physical 522 and OOB MAC Filters 524, for receiving of Out-of-Band (OOB) signals in the 
15 MPEG transport stream. The OOB signaling is used for transmitting Entitlement Management 
Messages (EMM) that determine if conditional access to selected programming and services is 
granted or allowed. The Central Processing Unit (CPU) 530 controls and monitors the functions 
of the POD module 310 and accesses Flash memory 560 and Dynamic Random Access Memory 
(DRAM) 570 through the Memory Controller 550. A Secure Microprocessor 580 is utilized to 
20 receive and control the EMM as well as the Entitlement Control Message (ECM). The ECM is 
used to verify the EMMs. The EMMs and ECM together provide the information required to 
determine if the subscriber is entitled to access the digital video/audio stream and for the POD 
module 310 to perform the decryption. A Non-Volatile Memory (NVM) 590 is used to store non- 
secure system parameters. 
25 The outputs of the two tuners, tuner 210 and tuner 211, in the host terminal 14 are two 

separate independent signals. The independent signals are passed through multiplexor 226 in the 
host terminal 14 that synchronizes them and combines them into a single data stream 410 that is 
sent through the modified POD interface 510 using the MPEG input stream select signal 430 to 
indicate the source of the active or current packetized data. The multi-stream capable POD 
30 module 310 demultiplexes these signals and uses the conditional access circuitry (internal secure 
microprocessor 580) to independently determine if the POD module 310 is authorized to decrypt 
the packetized data from each stream. This means that packetized data from both, either, or 
neither stream may be decrypted. If the decision is made to authorize decryption, the authorized 
packetized data will pass through a decryptor, otherwise the decryptor is bypassed. In one 
35 embodiment, if the packetized data was decrypted, that data will be re-encrypted to provide copy 
protection between the POD module 310 and the host terminal 14. The two packetized data 
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streams will then be multiplexed back together and transmitted to the host terminal 14. The host 
terminal 14 demultiplexes the streams and performs the desired user function such as picture-in- 
picture or taping one video/audio stream while viewing another. 

One advantage of the presem invention is the minimization of the number of connections 
required between the host terminal 14 and the POD module 310 for processing multiple 
packetized data streams. Utilizing the same input and output signals prevents the interface from 
requiring a larger connection. The POD module 310 uses 68-connector pins in the interface. There 
are 6 unused signals (A13-A10, A3-A2) in a standard POD module configuration. Other methods 
could require an additional 1 8 signals and a total of 12 extra connector pins to add a single 
additional digital video/audio stream. With the present invention, only two extra signals are 
required for the multiplex selection or Stream Select signal 430. No extra connector pins are 
required. In an embodiment using the 6 unused POD module 310 signals (3 for input, 3 for 
output), portions of up to 8 packetized data streams can be multiplexed together. 

An exemplary embodiment of the present invention modifies the standard POD interface to 
change the A12 signal to the input stream select signal and the A13 signal to the output stream 
select signal'. The POD module 310 initializes in a PCMCIA mode compatible with the PCMCIA 
standards. After initialization the POD module 310 functions in an external conditional access 
mode. The pin assignments of the PCMCIA/POD interface 510 between the host terminal 14 and 
the POD module 310 of an exemplary embodiment of the present invemion are as follows: 

Table 1. PCMCIA/POD pin assignments 



Pin 


PCMCIA 
Signal Name 


I/O 


POD 
Signal Name 


I/O 


Comments 


1 


Ground 


Power 


Ground 


Power 


Ground 


2 


Data 3 


I/O 


Data 3 


I/O 


Data bit 3 


3 


Data 4 


I/O 


Data 4 


I/O 


Data bit 4 


4 


Data 5 


I/O 


Data 5 


I/O 


Data bit 5 


5 


Data 6 


I/O 


Data 6 


I/O 


Data bit 6 


6 


Data? 


I/O 


Data? 


I/O 


Data bit 7 


7 


CE1# 


I 


CEI# 


I 


PCard enable 1 


8 


Address 10 


I 


Address 10 


I 


Address bit 10 


9 


OE# 


1 


OE# 


I 


Card output enable 


10 


Address 1 1 


I 


Address 1 1 


I 


Address bit 1 1 


n 


Address 9 


1 


DRX 


I 


Receiver data 


12 


Address 8 


I 


CRX 


I 


Receiver gapped clock 


13 


Address 13 


1 


MOSS 


I/O 


MPEG Output Stream Select 



SUBSTITUTE SHEET (RULE 26) 
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14 


Address 14 


1 


MCLKO 


O 


MPEG clock output 


15 


WE# 


I 


WE# 


I 


Write enable 


16 


READY/IREQ# 


O 


IREQ# 


O 


Interrupt request 


17 


Vcc 


Power 


Vcc 


Power 


3.3V 


18 


VppI 


Power 


Vppl 


Power 


5 V-S witched 


19 


Address 16 


j 


MIVAL 


I 


MPEG input valid 


20 


Address 15 


1 


MCLKI 


I 


MPEG input clock 


21 


Address 12 


j 


MISS 


I 


MPEG Input Stream Select 


22 


Address 7 


i 


QTX 


O 


Transminer 0 channel 


23 


Address 6 


i 


ETX 


O 


Transmitter enable 


24 


Address 5 


j 


1TX 


O 


Transminer 1 channel 


25 


Address 4 


j 


CTX 


1 


Transmitter gapped clock 


26 


Address 3 


j 


Address 3 


I 


Address bit 3 


27 


Address 2 


j 


Address 2 


1 


Address bit 2 


28 


Address 1 


i 


Address 1 


I 


Address bit 1 


29 


Address 0 


i 


Address 0 


1 


Address bit 0 


30 


Data 0 


I/O 


DataO 


I/O 


Data bit 0 
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Power 
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Those skilled in the art will recognize that the pin assignments could be changed, adjusted, 
expanded, or reduced and that alternate implementations are included within the scope of the 
present invention. 

Although the present invention has been described in one embodiment as allowing the 
decryption of multiple packetized data streams in a POD module 310, those skilled in the art will 
recognize that the unique designator and the Stream Select signal 430 can be used to allow multi- 
tasking of multiple packetized data streams by other components, such as the MPEG Decoders 
240 of host terminal 14. In one embodimem the host terminal 14 Demultiplexer 227 would not be 
needed, as a modiHed MPEG Decoders 240 could interface with the multiplexed data signal 410. 

The unique designator is not to be confused with a packet identifier (PID). The PID is 
associated with the packet and identifies ail packets with the same type of data associated with a 
particular program or service. For example, the video packets associated with the television 
program for channel 12 will all have the same PID. The unique identifier of the present invention 
is associated with the source of the portion of the multiplexed signal for the packetized data. 

In addition, those skilled in the art will recognize that to provide PIP or multiple recording 
options for multiple programs within the same transport stream, two or more of the multiple 
tuners could be tuned to the same transport stream. The present invention separately identifies the 
packetized data signals based on the tuner or source providing the input, even if the input signals 
to the tuners is identical. 
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Those skilled in the art will recognize that the elements herein described in the POD module 
310 and the host terminal 14 can be used for multiple functions and in various combinations 
within the scope of the present invention. For example, the Encryptor 516 can provide encryption 
for a variety of reasons including for copy protection and to prevent signal piracy between the 

5 POD module 310 and the host terminal 14. 

The terms encryption and decryption are intended to include encryption and decryption and 
the scrambling and unscrambling of data, including audio and video signals. Scrambling is the 
disarrangement of the elements of a transmission in order to make it unintelligible to anyone 
without an authorized receiver. 

10 It should be emphasized that the above-described embodiments of the present invention are 

merely possible examples of the implementations, set forth for a clear understanding of the 
principles of the invention. Many variations and modifications may be made to the above- 
described embodiments of the invention without departing substantially from the spirit of the 
principles of the invention. All such modifications and variations are intended to be included 

1 5 herein within the scope of the disclosure and the present invention and protected by the following 
claims. 

What is claimed is 
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1 1 . In a system with a plurality of packetized data streams, a method of designating a source of at 

2 least one packetized data stream within a multiplexed signal including at least a portion of the at least 

3 one packetized data stream, the method comprising the steps of: 

4 assigning a unique designator to the source of the at least one packetized data stream; 

5 multiplexing at least the portion of the at least one packetized data stream with at least a 

6 portion of a second packetized data stream to create the multiplexed signal; and 

7 transmitting the unique designator in conjunction with the multiplexed signal, wherein 

8 transmission of the unique designator indicates the source of the portion of the multiplexed signal as 

9 the source of the at least one packetized data stream. 

1 2. The method of claim 1 , wherein the packetized data stream is in a format compliant with one 

2 of Moving Picture Experts Group type 2 (MPEG-2) standard. Moving Picture Experts Group type 4 

3 (MPEG-4) standard. Asynchronous Transfer Modulation (ATM) standard, and Internet Protocol (IP) 

4 standard. 

1 3. The method of claim 1 , wherein the step of transmitting the unique designator comprises the 

2 steps of: 

3 creating a unique designator signal that includes the unique designator; and 

4 transmitting the unique designator signal in conjunction with the multiplexed signal, wherein 

5 the unique designator signal provides the unique designator at the start of the at least one packet of the 

6 at least one packetized data stream. 

1 4. The method of claim 1 , wherein the step of transmitting the unique designator comprises the 

2 steps of: 

3 creating a unique designator signal that includes the unique designator; and 

4 transmitting the unique designator signal in conjunction with the multiplexed signal, wherein 

5 the unique designator signal provides the unique designator at the start of the at least one byte of the at 

6 least one packetized data stream. 
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1 5 . In a system with a plurality of packetized data streams, a method of designating to an external 

2 conditional access module a source of at least one packetized data stream within a multiplexed signal 

3 including at least a portion of the at 'least one packetized data stream, the method comprising the steps 

4 of: 

5 assigning a unique designator to the source of the at least one packetized data stream; 

6 multiplexing at least the portion of the at least one packetized data stream with at least a 

7 portion of a second packetized data stream to create the multiplexed signal; and 

8 transmitting the unique designator in conjunction with the multiplexed signal to the external 

9 conditional access module, wherein transmission of the unique designator indicates the source of the 
1 0 portion of the multiplexed signal as the source of the at least one packetized data stream. 

1 6. The method of claim 5, wherein the packetized data stream is in a format compliant with one 

2 of Moving Picture Experts Group type 2 (MPEG-2) standard. Moving Picture Experts Group type 4 

3 (MPEG-4) standard. Asynchronous Transfer Modulation (ATM) standard, and Internet Protocol (IP) 

4 standard. 

1 7. The method of claim 5, wherein the step of transmitting the unique designator comprises the 

2 steps of: 

3 creating a unique designator signal that includes the unique designator; and 

4 transmitting the unique designator signal in conjunction with the multiplexed signal to the 

5 external conditional access module, wherein the unique designator signal provides the unique 

6 designator at the start of the at least one packet of the at least one packetized data stream. 

1 8. The method of claim 5, wherein the external conditional access module decrypts the at least 

2 one packet of the at least one packetized data stream based on the source of the at least one packetized 

3 data stream indicated by the unique designator. 
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1 9. In a host terminal, a method of muhipiexing together packets from at least two packetized 

2 data streams to enable decryption of the packets by an external conditional access module, the method 

3 comprising the steps of: 

4 assigning a unique designator to each originating packetized data stream of the at least two 

5 packetized data streams; 

6 multiplexing the packets forming portions of the at least two packetized data streams into a 

7 signal; 

8 creating an association for each packet in the signal with the unique designator of the 

9 originating packetized data stream from which each packet originated; 

1 0 transmitting the signal and the associations of the packets to the external conditional access 

1 1 module; and 

1 2 decrypting, in the external conditional access module, the packets in the signal based on the 

1 3 originating packetized data stream as indicated by the associated unique designator. 

1 1 0. The method of claim 9, wherein the at least two packetized data streams are in a format 

2 compl iant with one of Moving Picture Experts Group type 2 (MPEG-2) standard. Moving Picture 

3 Experts Group type 4 (MPEG-4) standard. Asynchronous Transfer Modulation (ATM) standard, and 

4 Internet Protocol (IP) standard. 
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1 1 1 . In a system with a plurality of Moving Picture Experts Group type 2 (MPEG-2) standard 

2 transport streams and a host terminal, a method of designating to an external conditional access 

3 module a source of at least one packet of a first MPEG-2 transport stream within a multiplexed signal 

4 including the at least one packet of the first MPEG-2 transport stream, the method comprising the 

5 steps of: 

6 assigning a unique designator to the source of the first MPEG-2 transport stream; 

7 creating a transport stream source indicator signal that includes the unique designator 

8 associated with the at least one packet of the first MPEG-2 transport stream; 

9 multiplexing the at least one packet of the first MPEG-2 transport stream with packets from at 

10 least a portion of a second MPEG-2 transport stream to create the multiplexed signal; and 

1 1 transmitting to the external conditional access module the transport stream source indicator 

12 signal in conjunction with the multiplexed signal, wherein transmission of the transport stream source 

1 3 indicator signal, by the unique designator, indicates the source of the at least one packet as the source 

1 4 of the first MPEG-2 transport stream . 

1 12. The method of claim 1 1 , further including the step of decrypting, in the external conditional 

2 access module, the at least one packet based on the source of the first MPEG-2 transport stream. 

1 13. The method of claim 12, further including the step of transmitting the decrypted at least one 

2 packet from the external conditional access module to the host terminal. 
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1 14. A external conditional access module that can decrypt, based on a unique designator that 

2 indicates a source of a data packet, data packets from at least one packetized data stream within an 

3 incoming multiplexed signal comprised of data packets from more than one packetized data stream, 

4 the external conditional access module comprising: 

5 a host terminal interface for receiving the incoming multiplexed signal from a host terminal, 

6 for transmitting an outgoing multiplexed signal to the host terminal, and for communicating the 

7 unique designator for each data packet in both the incoming multiplexed signal and the outgoing 

8 multiplexed signal; 

9 a de-muhiplexer for de-multiplexing the incoming multiplexed signal into data packets 

10 associated with the at least one packetized data stream based on the unique designator associated with 

1 1 each data packet; 

12 a controller for determining if decryption is allowed for the data packets associated with the 

13 least one packetized data stream and for controlling decryption parameters; 

14 at least one decryptor for decrypting, if decryption is allowed, the data packets associated with 

15 the at least one packetized data stream using decryption parameters for the at least one packetized data 

16 stream; and 

17 a multiplexer for multiplexing the data packets, including those that were decrypted and those 

18 for which decryption was not allowed, into the outgoing multiplexed signal. 

1 15. The method of claim 14, wherein the data packets and the packetized data stream are in a 

2 format compliant with one of Moving Picture Experts Group type 2 (MPEG-2) standard. Moving 

3 Picture Experts Group type 4 (MPEG-4) standard. Asynchronous Transfer Modulation (ATM) 

4 standard, and Internet Protocol (IP) standard. 

1 1 6. The method of claim 1 4, further comprising an encryptor for encrypting the data packets 

2 associated with the at least one packetized data stream. 

1 1 7. The method of claim 1 6, wherein the encryption provides copy protection for the data packets 

2 associated with the at least one packetized data stream. 
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1 1 8. A host terminal that provides a multiplexed signal to an external conditional access module, 

2 wherein the multiplexed signal includes data packets from at least two packetized data streams, the 

3 host terminal comprising: 

4 at least two tuners, each tuner for receiving one of the at least two packetized data streams; 

5 and 

6 a multiplexer for combining data packets from the at least two packetized data streams into 

7 the multiplexed signal, for assigning a unique indicator that indicates which tuner received the 

8 packetized data stream associated with the data packets, for transmitting the multiplexed signal to the 

9 external conditional access module, and for communicating the unique designator associated with 
10 each data packet to the external conditional access module. 

1 19. The host terminal of claim 1 8, wherein the data packets and the packetized data stream are in 

2 a format compliant with one of Moving Picture Experts Group type 2 {MPEG-2) standard. Moving 

3 Picture Experts Group type 4 (MPEG-4) standard. Asynchronous Transfer Modulation (ATM) 

4 standard, and Internet Protocol (IP) standard. 

1 20. The host terminal of claim 18, further comprising a demuhiplexer for receiving an output 

2 signal from the external conditional access module, for de-muhiplexing the output signal, and for 

3 providing the at least two packetized data streams as separate packetized data streams. 
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21. In a system ^vith a plurality of packetized data streams, a method of designating a source of a 
first packetized data stream within a multiplexed signal including at least a portion of the at least one 
packetized data stream, the method comprising the steps of: 

assigning a unique designator to the source of the at least one packetized data stream; 
multiplexing at least the portion of the at least one packetized data stream with at least a 
portion of a second packetized data stream to create the multiplexed signal; and 

transmitting the unique designator in conjunction with the multiplexed signal, wherein 
transmission of the unique designator indicates the source of the portion of the multiplexed signal as 
the source of the at least one packetized data stream . 
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